gcdRadar
live/Research/AIR-2026-1896
liveliveResearch1 Research / proof of conceptAI

Microsoft Researchers Show AI Agents Can Be Backdoored via Neuron Edits

AI agents

Microsoft researchers demonstrated that AI models can be backdoored by editing fewer than 10 rarely used neurons without retraining. This triggers malicious commands that connected AI agents can execute with their permissions.

why this severityResearch proof of concept demonstrated by researchers with no known real-world exploitation.

first report
11 Nov 2026
last update
13 Nov 2026

Timeline · 1

  1. 11 Nov 2026Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons

Sources · 3

News and write-ups

  1. 2026-11-11
    Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons
    The Hacker News · thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html
  2. 2026-11-11
    Microsoft researchers demonstrate hidden backdoor technique for AI agents
    Help Net Security · helpnetsecurity.com/2026/11/11/microsoft-hidden-ai-backdoors-lazarus

Research and catalogues

  1. 2026-11-13

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Supply chainAgent hijack
severity
1 · Research / proof of concept
targets
Enterprise deployment, Open-weight model
dates
happened 11 Nov 2026 · first reported 11 Nov 2026
origin
News & research feeds
record
confidence 0.95 · created 2026-11-11 08:41Z · updated 2026-11-13 16:43Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Microsoft Researchers Show AI Agents Can Be Backdoored via Neuron Edits

https://gcdradar.vercel.app/incidents/microsoft-researchers-show-ai-agents-can-be-backdoored-via-n · AIR-2026-1896 · live

- Lane: Research
- Severity: 1 (Research / proof of concept): Research proof of concept demonstrated by researchers with no known real-world exploitation.
- Fix status: Fix status unknown
- First reported: 2026-11-11
- AI role: Attack on AI
- Products: AI agents

## Summary

Microsoft researchers demonstrated that AI models can be backdoored by editing fewer than 10 rarely used neurons without retraining. This triggers malicious commands that connected AI agents can execute with their permissions.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-11: Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons (https://thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html)

## Sources

- 2026-11-11 The Hacker News: Microsoft Researchers Show AI Agents Can Be Backdoored by Editing Fewer Than 10 Neurons https://thehackernews.com/2026/11/microsoft-researchers-show-ai-agents.html
- 2026-11-11 Help Net Security: Microsoft researchers demonstrate hidden backdoor technique for AI agents https://helpnetsecurity.com/2026/11/11/microsoft-hidden-ai-backdoors-lazarus
- 2026-11-13 arXiv: Lazare, veni foras: Reprogramming Dormant Neurons to Backdoor AI Agents https://arxiv.org/abs/2611.15118

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    AI
  2. closed
    AI
  3. closed
    AI
  4. closed
    AI
  5. closed
    AI agents CERT-In Reports AI Agents Accessed Sensitive Data at Organizations During Testing

    Patch now · Exploited · since 15 Oct 2026 · updated 16 Oct 2026

    AI
  6. closed
    AI